$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: y0tbtA2rAq0e62s8BdI0WtVwzjTjsQzs2J3XyFb0yXI= Subject key identifier: B7:D4:B5:89:AE:BF:F0:78:D7:91:45:C2:F2:DF:C2:4E:4E:B4:58:A9 Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 27BD343A0F869A1CCE4BC3C9B2867CF68BE16DA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 018B Signing time: Sun 29 Jun 2025 05:10:51 +0000 Manifest this update: Sun 29 Jun 2025 05:05:51 +0000 Manifest next update: Wed 02 Jul 2025 05:50:51 +0000 Files and hashes: 1: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: bS7LBWeAvEGSD1T5Z6RuPXiny8Jnqyau0FNwJL5y5Qs=) 2: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: TQIXUPORoicFlFsW1CeJ0WyXZvquNMvkxI9AJDmEfuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bd:34:3a:0f:86:9a:1c:ce:4b:c3:c9:b2:86:7c:f6:8b:e1:6d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Jun 29 05:05:51 2025 GMT Not After : Jul 2 05:50:51 2025 GMT Subject: CN=B7D4B589AEBFF078D79145C2F2DFC24E4EB458A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:a4:c1:13:59:5c:23:41:4f:ad:0b:eb:cc: eb:8b:e8:25:75:84:19:c1:d8:d7:bc:e2:42:86:9e: d7:d9:13:12:e7:79:92:66:14:94:b1:e1:97:ba:ce: 99:28:43:fc:c3:e5:fc:da:73:8a:4a:db:67:8f:74: 0f:58:f8:f6:68:ac:14:0a:c4:d0:97:57:59:ee:42: 27:4d:55:99:f3:46:34:41:ae:d1:79:1c:39:31:8f: 55:16:10:f1:fd:50:77:b2:c3:0c:05:df:ca:4d:15: 34:7b:3f:1e:6b:9d:bc:c4:1a:36:72:39:68:13:56: 2a:97:2a:95:a2:16:80:48:fa:8f:63:17:b5:95:16: f2:38:6a:6d:0a:3b:c6:2b:bc:a3:62:ea:43:32:88: ea:5d:17:bb:8a:36:fe:38:40:e3:6f:f6:21:a9:b1: bc:4a:60:0e:cf:cf:b4:e5:fd:66:2e:64:c8:1c:0c: f6:a3:06:4d:17:c2:3e:dc:b2:9f:1d:0c:d4:c9:1f: f1:03:26:78:99:28:c6:fc:41:2e:44:42:91:11:d8: db:e5:82:c4:aa:f9:46:59:08:d5:0e:f3:76:d5:0e: d0:31:6d:83:67:50:97:45:37:f4:f1:96:5b:68:ea: ce:d4:13:72:f1:33:77:4b:4e:c6:3f:fc:58:7e:24: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:B5:89:AE:BF:F0:78:D7:91:45:C2:F2:DF:C2:4E:4E:B4:58:A9 X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a8:c8:e5:fd:2f:28:4e:2a:81:e7:4f:3c:55:82:c7:df:66: 4b:f6:1f:bb:a4:7b:d0:6c:ce:0f:7e:86:c6:0d:10:37:10:09: 1f:8c:cd:26:35:77:f4:5a:92:a2:6a:8e:ff:f1:53:dc:63:c6: f3:96:9c:4a:66:8c:f6:ec:ce:6a:63:65:3b:38:8a:c6:aa:1f: 45:39:60:e0:3f:88:af:67:35:9c:70:d5:4c:af:3f:bf:cd:6f: 44:66:87:5b:0e:86:53:f1:f2:05:c4:94:13:07:25:b6:e2:a9: c2:26:7f:f6:75:31:38:7f:7a:b4:c4:27:14:4c:ed:80:f3:e5: 28:87:56:3b:cf:70:2c:b2:54:e6:3e:79:f6:a2:7d:dc:12:dc: b8:b7:bd:68:f9:b2:82:39:5f:05:4a:0d:c2:74:1b:1b:bc:84: c0:fd:0e:94:73:e9:8e:6f:2e:29:3e:02:10:46:d0:21:2d:3a: 57:b4:84:f8:1f:0d:ca:a5:5f:08:9e:ad:5d:83:a3:a8:32:c7: ad:c6:53:de:33:0d:b0:06:af:03:63:fd:df:da:de:24:fd:22: 67:a0:88:60:58:d6:dd:a3:e5:ef:b4:c7:01:82:db:89:44:9f: 8c:76:54:aa:7e:ab:99:3f:d7:21:6f:93:46:01:5a:99:3e:ab: fe:19:0a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ700Og+GmhzOS8PJsoZ89ovhbakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTA2MjkwNTA1NTFaFw0yNTA3MDIwNTUwNTFaMDMxMTAvBgNV BAMTKEI3RDRCNTg5QUVCRkYwNzhENzkxNDVDMkYyREZDMjRFNEVCNDU4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDju6TBE1lcI0FPrQvrzOuL6CV1 hBnB2Ne84kKGntfZExLneZJmFJSx4Ze6zpkoQ/zD5fzac4pK22ePdA9Y+PZorBQK xNCXV1nuQidNVZnzRjRBrtF5HDkxj1UWEPH9UHeywwwF38pNFTR7Px5rnbzEGjZy OWgTViqXKpWiFoBI+o9jF7WVFvI4am0KO8YrvKNi6kMyiOpdF7uKNv44QONv9iGp sbxKYA7Pz7Tl/WYuZMgcDPajBk0Xwj7csp8dDNTJH/EDJniZKMb8QS5EQpER2Nvl gsSq+UZZCNUO83bVDtAxbYNnUJdFN/Txllto6s7UE3LxM3dLTsY//Fh+JJPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9S1ia6/8HjXkUXC8t/CTk60WKkwHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWoyOX9LyhOKoHnTzxVgsffZkv2H7uke9Bs zg9+hsYNEDcQCR+MzSY1d/RakqJqjv/xU9xjxvOWnEpmjPbszmpjZTs4isaqH0U5 YOA/iK9nNZxw1UyvP7/Nb0Rmh1sOhlPx8gXElBMHJbbiqcImf/Z1MTh/erTEJxRM 7YDz5SiHVjvPcCyyVOY+efaifdwS3Li3vWj5soI5XwVKDcJ0Gxu8hMD9DpRz6Y5v Lik+AhBG0CEtOle0hPgfDcqlXwierV2Do6gyx63GU94zDbAGrwNj/d/a3iT9Imeg iGBY1t2j5e+0xwGC24lEn4x2VKp+q5k/1yFvk0YBWpk+q/4ZCho= -----END CERTIFICATE-----Generated at Sun Jun 29 19:05:57 2025 by rpki-client